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IN THE CLAIMS 

Please amend the claims as follows: 

I. -8. (withdrawn). 

9. (currently amended) A split-mask, masking countermeasure method for improving the 
r e sisting s e curity attacks o nr esistance, to power analysis attacks, of a processing unit 
performing a defined cryptographic function using a key t o p e rform a defi n ed cr yp t og rap h ic 
function , the method comprising the following steps: 

obtaining the key and a random key mask value r; 

obtaining a set of n random input values m in l , ... m in n; 

defining a masked function by masking the defined cryptographic function with the value 
m in l A ... A m in n; 

masking the key with the random key mask value r to define the value mkey; 
obtaining a set of random split mask values ml, ... mn- 1 ; 
defining a split mask value mn to be i^mjnl A . . . A m; n n A ml A . . . A mn-1 ; and 
using the values ml,. . .,mn and mkey to define input for the masked function. 

1 0. (original) The method of claim 9 in which the encryption function is a table look-up. 

I I . (original) The method of claims 9 or 1 0 in which masking is a bitwise exclusive or 
operation carried out on binary values. 

12. (currently amended) A split-mask, masking countermeasure method for improving the 
resistance, to power analysis attacks, resistin g of a processing unit performing a 
cryptographic function s e curity attacks on a proc e ssing unit using a key to encrypt a 
plaintext value using a look up on a defined look-up table, the method comprising the 

following steps: 
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obtaining the key and a random key mask value r; 

defining a value mkey by masking the key with the random key mask value r; 
obtaining a set of n random input values mj n l, ... nij n n; 

defining a masked table by masking the defined look-up table with the value m in l A ... A m in n; 

masking th e key with th e random value r to d e fin e th e value mk e y; 

obtaining a set of split mask values comprising random values ml, ... mn-1 ; 

defining a split mask value mn to be i^minl A . . . A mi n n A ml A . . . A mn-1 ; and 

masking the plaintext with the split mask values ml,. . .,mn and mkey to define input for the 
masked table , the masked table to be used in place of the defined look-up table in the 
cryptographic operation . 

13. (original) The method of claim 12 in which masking is a bitwise exclusive or operation 
carried out on binary values. 

14. -29. (withdrawn). 

30. (currently amended) A computing device program product for improving the resistance, to 
power analysis attacks, of a processing unit r e sisting s e curity attack s on a processing unit 
using a key to perform a defined cryptographic function, the computing device program 
product comprising a computer usable storage medium having computer readable program 
code means embodied in said storag e medium, and comprising 

program code means for obtaining the key and a random key mask value r, 

program code means for obtaining a set of n random input values m in l, ... m^n, 

program code means for defining a masked function by masking the defined 
cryptographic function with the value m; n l A . . . A mjnn, 
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program code means for masking the key with the random key mask value r to define the 
value mkey, 

program code means for obtaining a set of random split mask values ml , . . . mn- 1 , 

program code means for defining a split mask value mn to be 
r A m in l A ... A m in n A ml A ... A mn-l 5 and 

program code means for using the values ml,. ..,mn and mkey to define input for the 
masked function. 

3 1 . (original) The computing device program product of claim 30 in which the encryption 
function is a table look-up. 

32. (original) The computing device program product of claims 30 and 3 1 in which masking is a 
bitwise exclusive or operation carried out on binary values. 

33. (currently amended) A computing device program product for improving the resistance, to 
power analysis attacks, of a processing unit performing a cryptographic function r e si s ting 
security attacks on a proc e ssing unit using a key to encrypt a plaintext value using a look up 
on a table, the computing device program product comprising a computer usable storage 
medium having computer readable program code means embodied in said storage medium, 
and comprising 

program code means for obtaining the key and a random key mask value r, 

program code means for obtaining a set of n random input values mj n l, . . . mi n n, 

program code means for defining a masked table by masking the defined look-up table 
with the value mj n l A . . . A m in n, 

program code means for masking the key with the random key mask value r to define the 
value mkey, 
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program code means for obtaining a set of random split mask values ml, ... mn-1, 

program code means for defining a split mask value mn to be 
r A mj n l A ... A m in n A ml A ... A mn-l, and 

program code means for masking the plaintext with the values ml,...,mn and mkey to 
define input for the masked table. 

34. (original) The computing device program product of claim 33 in which masking is a bitwise 
exclusive or operation carried out on binary values. 



35.-58. (withdrawn) 



